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IN THE CLAIMS 

Please amend the claims as follows: 

I. -8. (cancelled). 

9. (previously amended) A split-mask, masking countermeasure method for improving the 
resistance, to power analysis attacks, of a processing unit performing a defined cryptographic 
function using a key , the method comprising the following steps: 

obtaining the key and a random key mask value r; 

obtaining a set of n random input values m m l, ... m m n; 

defining a masked function by masking the defined cryptographic function with the value 
m jn l A ... A m jn n; 

masking the key with the random key mask value r to define the value mkey; 
obtaining a set of random split mask values ml , . . . mn-1 ; 
defining a split mask value mn to be r A mjnl A ... A mj n n A ml A ... A mn-l; and 
using the values ml,...,mn and mkey to define input for the masked function. 

10. (original) The method of claim 9 in which the encryption function is a table look-up. 

I I . (original) The method of claims 9 or 10 in which masking is a bitwise exclusive or 
operation carried out on binary values. 

12. (previously amended) A split-mask, masking countermeasure method for improving the 
resistance, to power analysis attacks, of a processing unit performing a cryptographic 
function using a key to encrypt a plaintext value using a look up on a defined look-up table, 
the method comprising the following steps: 

obtaining the key and a random key mask value r; 
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defining a value mkey by masking the key with the random key mask value r; 
obtaining a set of n random input values m jn l, ... nij n n; 

defining a masked table by masking the defined look-up table with the value m in l A ... A m m n; 

obtaining a set of split mask values comprising random values ml, ... mn- 1 ; 

defining a split mask value mn to be r A m in l A ... A m in n A ml A ... A mn-l; and 

masking the plaintext with the split mask values ml,...,mn and mkey to define input for the 
masked table, the masked table to be used in place of the defined look-up table in the 
cryptographic operation. 

13. (original) The method of claim 12 in which masking is a bitwise exclusive or operation 
carried out on binary values. 

14. - 29. (cancelled). 

30. (currently amended) A computing device program product for improving the resistance, to 
power analysis attacks, of a processing unit using a key to perform a defined cryptographic 
function, the computing device program product comprising a computer usable storage 
medium having computer readable program code means embodi e d stored in said storage 
medium, and comprising 

program code means for obtaining the key and a random key mask value r, 

program code means for obtaining a set of n random input values m in l, ... m m n, 

program code means for defining a masked function by masking the defined 
cryptographic function with the value nij n l A ... A mj n n, 

program code means for masking the key with the random key mask value r to define the 
value mkey, 
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program code means for obtaining a set of random split mask values ml, ... mn-1, 

program code means for defining a split mask value mn to be 
r^m j„ 1 A . . . A m, n n A m 1 A . . . A mn- 1 , and 

program code means for using the values ml,...,mn and mkey to define input for the 
masked function. 

31. (original) The computing device program product of claim 30 in which the encryption 
function is a table look-up. 

32. (original) The computing device program product of claims 30 and 31 in which masking is a 
bitwise exclusive or operation carried out on binary values. 

33. (previously amended) A computing device program product for improving the resistance, to 
power analysis attacks, of a processing unit performing a cryptographic function using a key 
to encrypt a plaintext value using a look up on a table, the computing device program product 
comprising a computer usable storage medium having computer readable program code 
means e mbodi e d stored in said storage medium, and comprising 

program code means for obtaining the key and a random key mask value r, 

program code means for obtaining a set of n random input values mi n l, ... mj n n, 

program code means for defining a masked table by masking the defined look-up table 
with the value mj n l A ... A mj n n, 

program code means for masking the key with the random key mask value r to define the 
value mkey, 

program code means for obtaining a set of random split mask values ml, ... mn-1, 

program code means for defining a split mask value mn to be 
r A m, n 1 A . . . A m in n A m 1 A . . . A mn- 1 , and 
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program code means for masking the plaintext with the values ml,...,mn and mkey to 
define input for the masked table. 

34, (original) The computing device program product of claim 33 in which masking is a bitwise 
exclusive or operation carried out on binary values. 



35. - 58. (cancelled) 



